/build/static/layout/Breadcrumb_cap_w.png

Best Practices Question


Detect and Deploy to all patches except a select few

09/18/2020 251 views
In my last job we used Shavlik for patching and I was able to set the detect and deploy settings to look for and update all software and then add exceptions we didn't want to be patched.  For example, we wanted everything to patch except Java because sometimes updating Java would break things.  I can't figure out how to do the same things with KACE.  It looks like I either have to create patch labels for each publisher or product and limit the patching to those labels or I have to allow all patching.  Is there a way to allow for patching all software except the ones I select?  Thanks in advance for any help and I apologize if this has been asked a million times already
Answer Summary:
2 Comments   [ + ] Show comments

Comments

  • I think I figured out my own issue. I created a smart lable and created rules that say "does not contain" and put Java in it. This will install everything but Java I think. Please let me know if that won't work.
  • Thanks for the confirmation Hobbsy!

Answer Chosen by the Author

0

You are exactly right and that was just what I was going to suggest. Create an applications patching label which contains all applications but not Java

Answered 09/22/2020 by: Hobbsy
Red Belt

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ